Stumped on roaming profiles

[Len Harold]

Hello all,

I can't make roaming profiles work correctly without adding the
users to the domain admin group.  The start menu folders are read
but not the NTUSERS.DAT file.  Of course everything works just as
expected for the users listed in the domain admin group.  The
top profiles directory is mode 777 (although those created under
it are 700 with file being 600).  Below is my smb.conf file.

Len

------- smb.conf -------

[global]
   os level = 		255
   announce as =        NT Server
   workgroup =		TEST
   server string =      TEST Domain Server
   encrypt passwords =  yes
   domain master = 	yes
   domain logons = 	yes
   logon script =       \\%N\netlogon\logon.bat
   logon home =         \\%N\%U
   logon path =         \\%N\profiles\%U
   logon drive =        H:
   domain admin group = smbroot,tester
   local master = 	yes
   prefered master = 	yes
   wins support =       yes
   dns proxy =          yes
   name resolve order = lmhosts host bcast
   allow hosts =	129.101.147.0/255.255.255.0
   interfaces =         129.101.147.147/255.255.255.0
   bind interfaces only = true
   security =		user
   valid users = 	samba,smbguest, at sys, at crl, at ccie, at em, at soi
   writable =		no
   read only =		yes
   public = 		no
   guest account =      smbguest
   guest ok =		no
   directory mode =	0700
   create mode =	0600
   browseable =		yes
   printing =		hpux
   load printers =	yes
   time server =        true
   auto services =	%u 
   mangled map = 	(*;1 *)
   lock directory =     /opt/samba/var/locks
   share modes =        yes
   socket options =     TCP_NODELAY
   read prediction =    yes


; Domain login

[netlogon]
   comment = 		Logon Scripts
   browseable =		no
   guest ok =           yes
   public = 		yes
   path =		/opt/samba/logon
   oplocks =            false


; Profiles

[profiles]
   comment =            User Profiles
   path =               /home/profiles
   browseable =         yes
   read only =		no
   writeable =          yes
   guest ok =		yes


; Home Directories

[homes]
   comment = 		Home Directories
   browseable =		no
   read only =		no
   writable =		yes


; Printers

[laser]
   comment = 		General Printer
   path =		/var/tmp
   printable = 		yes
   public = 		yes

[facp]
   comment = 		Faculty Printer
   path =		/var/tmp
   printable = 		yes
   public = 		yes
   valid users =	@sys, at crl, at WWW,smbroot

[facp2]
   comment = 		Faculty 2 Printer
   path =		/var/tmp
   printable = 		yes
   valid users =	@sys, at crl, at WWW,smbroot

[secp]
   comment = 		Secretary Printer
   path =		/var/tmp
   printable = 		yes
   valid users =	@sys, at crl, at WWW,smbroot

[studp]
   comment = 		LACR Printer
   path =		/var/tmp
   printable = 		yes
   public = 		yes

[color]
   comment = 		LACR Color Laser
   path =		/var/tmp
   printable = 		yes
   public = 		yes

[facc2]
   comment = 		LACR Color Laser 2
   path =		/var/tmp
   printable = 		yes
   valid users =	@sys, at crl, at ccie,smbroot

[gradp]
   comment = 		Printer in Analog Lab
   path =		/var/tmp
   printable = 		yes
   public = 		yes

[djet]
   comment = 		Plotter in Test Lab
   path =		/var/tmp
   printable = 		yes
   valid users =        @sys, at crl,smbroot


; Drive exports

; OS installs

[NT]
   comment = 		Windows NT
   path = 		/pc/nt
   valid users = 	lharold,smbroot
   oplocks =            false

[Win95]
   comment = 		Windows 95
   path = 		/pc/win95
   valid users = 	lharold,smbroot
   oplocks =            false


; Application installs

[Office]
   comment = 		Office Pro 97
   path = 		/pc/office97
   valid users = 	lharold,smbroot
   oplocks =            false

[McAfee]
   comment = 		McAfee Virus Shield
   path = 		/pc/mcafee
   valid users = 	lharold,smbroot
   oplocks =            false

[NT Res Kit]
   comment = 		NT Resource Kit
   path = 		/pc/ntreskit
   valid users = 	lharold,smbroot
   oplocks =            false


; Software

[Install]
   comment = 		Install Apps
   path = 		/pc/apps
   valid users = 	lharold,smbroot
   writable =           yes

[Apps]
   comment = 		Apps
   path = 		/pc/apps
   guest ok =           yes


; Other drives

[Linux]
   comment = 		Redhat
   path = 		/pc/linux
   valid users = 	lharold,smbroot
   oplocks =            false

[Web]
   comment = 		Web Pages
   path = 		/pc/web
   valid users = 	lharold,smbroot
   force group =        WWW
   directory mode =     0775
   create mode =        0664
   writable =           yes

[Image1]
   comment = 		CD image 1
   path = 		/cd/image
   valid users = 	lharold,smbroot
   browseable =		no
   writable =           no
   oplocks =            false

[Image2]
   comment = 		CD image 2
   path = 		/cd/image2
   valid users = 	lharold,smbroot
   browseable =		no
   writable =           no
   oplocks =            false

; Temporary file space

[Tmp]
   comment = 		Temporary file space
   path =		/tmp
   read only = 		no
   writable = 		yes
   guest ok =		yes
   public = 		yes